CVE-2020-3645

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Score

CVSS 3.1 7.5 High

Status

Modified - product-security@qualcomm.com

Published

2020-06-02

Last modified

2024-08-04

Weaknesses

CWE-617

Affected products

• Ipq6018 Firmware (Qualcomm)
• Ipq8074 Firmware (Qualcomm)
• Kamorta Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qca6390 Firmware (Qualcomm)
• Qca8081 Firmware (Qualcomm)
• Qcn7605 Firmware (Qualcomm)
• Qcs404 Firmware (Qualcomm)
• Qcs405 Firmware (Qualcomm)
• Qcs605 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Sc7180 Firmware (Qualcomm)
• Sc8180x Firmware (Qualcomm)
• Sda845 Firmware (Qualcomm)
• Sdm670 Firmware (Qualcomm)
• Sdm710 Firmware (Qualcomm)
• Sdm845 Firmware (Qualcomm)
• Sdm850 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sxr1130 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Connectivity (Qualcomm Inc.)
• Snapdragon Consumer Electronics Connectivity (Qualcomm Inc.)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin